Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Static Code Analysis (SAST) — Tools — Page 8 | Kitploit

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
154 results
php_code_analysis preview

php_code_analysis

GitHubkira2040k/php_code_analysis

Static PHP code scanner that detects SQL injection, XSS, SSRF, LFI, command injection, insecure deserialization, and other web vulnerabilities in…

vulnerability-scannersstatic-code-analysiscode-analysis+1
94
4 years ago
rips-scanner preview

rips-scanner

GitHubrobocoder/rips-scanner

RIPS - A static source code analyser for vulnerabilities in PHP scripts

vulnerability-scannersstatic-code-analysisvulnerability-analysis+2
3234 years ago
Sourcetrail preview
Archived

Sourcetrail

GitHubcoatisoftware/sourcetrail

Sourcetrail - free and open-source interactive source explorer

static-code-analysiscode-analysisreverse-engineering+2
16.5k4 years ago
jspanda preview

jspanda

GitHubredsection/jspanda

client-side prototype pullution vulnerability scanner

vulnerability-scannersdynamic-analysis-sandboxingstatic-code-analysis+1
465 years ago
ngrev preview

ngrev

GitHubmgechev/ngrev

Tool for reverse engineering of Angular applications

static-code-analysiscode-analysisreverse-engineering
1.6k5 years ago
Cobra preview
Archived

Cobra

GitHubfeeicn/cobra

Source Code Security Audit (源代码安全审计)

vulnerability-scannersstatic-code-analysiscode-analysis+3
3.2k5 years ago
regexploit preview

regexploit

GitHubdoyensec/regexploit

Find regular expressions which are vulnerable to ReDoS (Regular Expression Denial of Service)

static-code-analysisvulnerability-analysisfuzzing
8485 years ago
airflowscan preview

airflowscan

GitHubnightwatchcybersecurity/airflowscan

Checklist and tools for increasing security of Apache Airflow

static-code-analysisconfiguration-auditingcloud-security+2
325 years ago
StaCoAn preview

StaCoAn

GitHubvincentcox/stacoan

StaCoAn is a crossplatform tool which aids developers, bugbounty hunters and ethical hackers performing static code analysis on mobile applications.

android-securitystatic-code-analysisvulnerability-analysis+1
8695 years ago
Bughound preview

Bughound

GitHubmhaskar/bughound

Static code analysis tool based on Elasticsearch

vulnerability-scannersstatic-code-analysisvulnerability-analysis+2
1305 years ago
needle preview
Archived

needle

GitHubreverseclabs/needle

The iOS Security Testing Framework

dynamic-analysis-sandboxingios-securitystatic-code-analysis+4
1.4k5 years ago
hardcodes preview

hardcodes

GitHubs0md3v/hardcodes

find hardcoded strings from source code

general-purpose-utilitiesstatic-code-analysiscode-analysis+1
2836 years ago
RiskAssessmentFramework preview
Archived

RiskAssessmentFramework

GitHubowasp/riskassessmentframework

The Secure Coding Framework

static-code-analysisvulnerability-analysiscode-analysis+1
2726 years ago
Decompiler_Tools preview

Decompiler_Tools

GitHubjas502n/decompiler_tools

Tools

static-code-analysisreverse-engineeringbinary-analysis
86 years ago
pyt preview

pyt

GitHubpython-security/pyt

A Static Analysis Tool for Detecting Security Vulnerabilities in Python Web Applications

static-analysisstatic-code-analysisvulnerability-analysis+2
2.2k6 years ago
lightweight_static_analysis preview

lightweight_static_analysis

GitHubnccgroup/lightweight_static_analysis

Create useful, lightweight static analyses using open source tools + a tiny bit of your code

static-code-analysisvulnerability-analysiscode-analysis+4
137 years ago
wpbullet preview

wpbullet

GitHubwebarx-security/wpbullet

A static code analysis for WordPress (and PHP)

static-code-analysisvulnerability-analysiscode-analysis+1
2397 years ago
autoSource preview

autoSource

GitHubshubhamshubhankar/autosource

Automated static code analysis framework integrated with SonarQube for early vulnerability detection in source code by scanning Git repositories…

static-code-analysisvulnerability-analysiscode-analysis+1
707 years ago
Previous1…789Next